I know Cydoor is mentioned here but it&#39;s the sychost.exe line i&#39;m not sure about

What you think,i dont want to bugger my pc up ;)

http://image1ex.villagephotos.com/2106252.jpg

Schuler

04-08-2003, 11:23 AM

I know I always have those svhosts running, not infected though. I dont think its safe to delete (I don&#39;;t know for sure) but see if it can be cleaned first. I don;t have ad-watch so I don&#39;t really know how it works.

bronco

04-08-2003, 11:39 AM

Originally posted by Schuler@8 April 2003 - 11:23
I know I always have those svhosts running, not infected though. I dont think its safe to delete (I don&#39;;t know for sure) but see if it can be cleaned first. I don;t have ad-watch so I don&#39;t really know how it works.
Ok i&#39;ll leave it for now untill maybe someone tells me otherwise.

I have seen somewhere that there&#39;s two very similer looking svhosts one&#39;s a virus,the other&#39;s to do with windows,perfectly ok.

Im just a bit confused here with this one :unsure:

Anyone?

CornerPocket

04-08-2003, 01:09 PM

Svchost.exe (Windows NT/2000/XP) is a generic host process name for services that are run from dynamic-link libraries (DLLs). The Svchost.exe file is located in the %SystemRoot%&#092;System32 folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. There can be multiple instances of Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. In this case it should be okay to remove that particular file since it&#39;s running alone.

Does Adwatch not have a backup function? If so, back up then remove, shouldn&#39;t have any issues since you will be removing the cydoor service and not svchost.exe.

Originally posted by CornerPocket@8 April 2003 - 13:09
Svchost.exe (Windows NT/2000/XP) is a generic host process name for services that are run from dynamic-link libraries (DLLs). The Svchost.exe file is located in the %SystemRoot%&#092;System32 folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. There can be multiple instances of Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. In this case it should be okay to remove that particular file since it&#39;s running alone.

Does Adwatch not have a backup function? If so, back up then remove, shouldn&#39;t have any issues since you will be removing the cydoor service and not svchost.exe.

More info (XP): Svchost.exe (http://support.microsoft.com/default.aspx?scid=KB;en-us;q250320)
thats what i was gonna say.
svchost is the name for windows services, so cydoor is loaded up with services, i would think it would be safe to delete, but any ad supported software may not work, not to sure though.